--- title: Browse articles in Security Research description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/categories/security-research/page/9/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * Security Research # Browse articles in Security Research 05 August 2022 ### [European pipeline operator hit by BlackCat/ALPHV ransomware](https://www.acronis.com/en/tru/posts/european-pipeline-operator-hit-by-blackcat-alphv-ransomware/) The ALPHV/BlackCat ransomware gang claims to have stolen more than 150 GB of data from Creos Luxembourg S.A., a company which manages natural gas pipelines and electrical networks in the Grand Duchy of Luxembourg. The alleged stolen data consists of 180,000 files, including contracts, agreements, passports, bills and emails. 05 August 2022 ### [New attack framework Manjusaka is similar to Cobalt Strike](https://www.acronis.com/en/tru/posts/new-attack-framework-manjusaka-is-similar-to-cobalt-strike/) Researchers have observed a new post-exploitation attack framework in the wild. Manjusaka, as it's called, can be deployed as an alternative to the popular Cobalt Strike toolset ⁠— or parallel to it for redundancy. 29 July 2022 ### [QBot malware uses Windows Calculator to side-load attacks](https://www.acronis.com/en/tru/posts/qbot-malware-uses-windows-calculator-to-side-load-attacks/) Security researchers have discovered that QBot malware is now using the legitimate Windows Calculator app for DLL side-loading attacks. The method continues to be used in current malspam campaigns. 27 July 2022 ### [Version 4.2 of malicious shortcut generator MLNK Builder emerges on dark web](https://www.acronis.com/en/tru/posts/version-42-of-malicious-shortcut-generator-mlnk-builder-emerges-on-dark-web/) A new version of MLNK Builder, a link generation tool popular among cybercriminals, has emerged on the dark web. The updated feature set focuses on antivirus evasion and masquerading techniques, using icons of popular legitimate applications and file formats. 26 July 2022 ### [Symbiote: A new stealthy malware for Linux](https://www.acronis.com/en/tru/posts/symbiote-a-new-stealthy-malware-for-linux/) Symbiote is a new Linux malware that steals users’ data and provides a backdoor to threat actors. It was discovered in June, 2022 and is characterized as a very stealthy malware. It uses a lot of evasion techniques, such as hooking functions, capturing TCP traffic and hiding its own files. It collects users' data and exfiltrates it on DNS servers. 25 July 2022 ### [Building materials firm Knauf hit by Black Basta ransomware](https://www.acronis.com/en/tru/posts/building-materials-firm-knauf-hit-by-black-basta-ransomware/) The Knauf Group, a German-based multinational producer of construction materials, has announced that it's been the target of a cyberattack. The incident took place on the night of June 29, forcing its global IT team to shut down email systems, although communications were still possible via mobile devices and Microsoft Teams. 19 July 2022 ### [Bandai Namco hit by BlackCat ransomware](https://www.acronis.com/en/tru/posts/bandai-namco-hit-by-blackcat-ransomware/) The Japanese video game giant Bandai Namco, known for publishing franchises like Elden Ring, Pac-Man and Tekken, has been hit by BlackCat/AlphV ransomware. 09 July 2022 ### [Google releases several vulnerability fixes for Chrome browser](https://www.acronis.com/en/tru/posts/google-releases-several-vulnerability-fixes-for-chrome-browser/) Google has released updates for its popular Chrome browser to remediate several vulnerabilities, including a high-severity vulnerability that has already been exploited in the wild. This marks the fourth zero-day vulnerability that had to be patched in Chrome this year. 28 June 2022 ### [Important details About BlackCat: The new version of the ALPHV ransomware-as-a-service](https://www.acronis.com/en/tru/posts/important-details-about-blackcat-the-new-version-of-the-alphv-ransomware-as-a-service/) On March 16, 2022, security specialists identified a new version of BlackCat ransomware (so named because the software displays a black cat on the victim’s payment site). These experts also noted that some previous YARA rules no longer match, which will make it difficult to find malicious files. 15 June 2022 ### [MSDT "Follina" vulnerability exploited in attacks against U.S., European governments](https://www.acronis.com/en/tru/posts/msdt-follina-vulnerability-exploited-in-attacks-against-us-european-governments/) An unpatched remote code execution vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT), which is being tracked as CVE-2022-30192, is being exploited in phishing campaigns that are targeting U.S. and European government organizations. 14 June 2022 ### [Vice Society ransomware hits Italian city of Palermo](https://www.acronis.com/en/tru/posts/vice-society-ransomware-hits-italian-city-of-palermo/) Palermo, a city of 1.3 million people and a popular tourist destination in Southern Italy, has become the latest victim of a Vice Society ransomware attack. 08 June 2022 ### [Austrian state of Carinthia hit by BlackCat ransomware](https://www.acronis.com/en/tru/posts/austrian-state-of-carinthia-hit-by-blackcat-ransomware/) Carinthia, the southernmost state in Austria, has had their computer systems encrypted by BlackCat (ALPHV) ransomware, causing a severe disruption of government services. [1](https://www.acronis.com/en/tru/categories/security-research/page/1/)...[7](https://www.acronis.com/en/tru/categories/security-research/page/7/) [8](https://www.acronis.com/en/tru/categories/security-research/page/8/) [9](https://www.acronis.com/en/tru/categories/security-research/page/9/) [10](https://www.acronis.com/en/tru/categories/security-research/page/10/) [11](https://www.acronis.com/en/tru/categories/security-research/page/11/)...[15](https://www.acronis.com/en/tru/categories/security-research/page/15/)